1. What are the 5 main steps in hacking process? 2. What is Zenmap typically used for? How is it related to Nmap? 3. Which application can be used to perform a vulnerability assessment scan in the reconnaissance phase of the ethical hacking process? 4. What must you obtain before you begin the ethical hacking process or penetration test on a live production network, even before performing the reconnaissance step? 5. What is CVE listing? Who hosts and sponsors the CVE database listing web site? 6. What is the major difference between Zenmap and Nessus?